This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft File: 7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft (raw, json) Hash identifier: nUK7P+aDdrO2Zd/J0+8nuNlPWV64xj1+9wq/3vYLVBY= Subject key identifier: 20:BA:56:86:1B:79:D7:4E:D3:D5:03:64:2A:D6:D4:0C:28:3F:A8:17 Authority key identifier: 76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B Certificate issuer: /CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B Certificate serial: 7B29E9852CB03FEF10D4B73F360D0C0712025747 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer Subject info access: rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft Manifest number: 033B Signing time: Sun 21 Dec 2025 19:04:55 +0000 Manifest this update: Sun 21 Dec 2025 18:59:55 +0000 Manifest next update: Mon 22 Dec 2025 19:41:55 +0000 Files and hashes: 1: 3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa (hash: PMrjcyP1eWdz1t4C8jQeZvMc6KD9XmEaTz6pAa2qGc0=) 2: 7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl (hash: WLuTQHFqXGegSGlt6PBrTVKqvxc21Pn5jbqit7DjrNo=) 3: 323830343a326635303a3a2f33322d3334203d3e20323634383833.roa (hash: UhuA4JaTHqXuDos7SEPbAnepHfJlw4HrEcewbAoILag=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 19:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:29:e9:85:2c:b0:3f:ef:10:d4:b7:3f:36:0d:0c:07:12:02:57:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B Validity Not Before: Dec 21 18:59:55 2025 GMT Not After : Dec 22 19:41:55 2025 GMT Subject: CN=20BA56861B79D74ED3D503642AD6D40C283FA817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ac:95:b3:cd:e2:0a:b7:18:da:97:0f:0d:29: 20:a7:ee:9e:d1:e9:d5:5d:d2:2e:b6:dd:ea:9a:cd: 7c:36:55:d7:4c:ac:6d:c0:9a:54:1c:2c:7e:a6:7c: 10:0b:4e:a4:29:f6:82:a4:a3:13:15:61:85:74:f3: 0c:e3:0a:8b:14:5f:30:64:7e:d6:58:e1:b6:68:25: 25:3c:05:72:33:cb:67:eb:a9:31:bb:a9:32:b6:44: ff:98:db:55:f8:5d:af:93:07:c8:30:a0:45:5d:a8: 65:ba:16:1d:32:14:1a:8e:f5:ad:2b:4e:3d:4e:06: 8b:30:59:cf:de:96:f0:72:b2:0a:a0:d8:33:32:ff: b7:68:36:cc:f8:96:38:86:4c:94:0e:9a:f3:91:dc: 71:26:de:61:ab:57:b9:2a:5d:7f:12:bc:68:58:48: a5:79:71:23:e3:5a:0e:b9:37:0f:b3:86:7f:8b:35: c7:d5:3d:08:f4:2f:bc:91:9a:75:fb:22:82:35:0d: 81:68:70:fd:78:68:41:c1:23:a0:74:57:ee:4b:6a: da:ca:26:6a:b6:b1:4c:e1:a0:98:3b:cb:0e:d1:af: 46:09:37:3c:dd:3a:27:96:6d:18:7f:22:fc:88:00: 83:1f:55:64:b6:43:69:f0:05:b8:be:e1:d9:e8:2d: 17:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BA:56:86:1B:79:D7:4E:D3:D5:03:64:2A:D6:D4:0C:28:3F:A8:17 X509v3 Authority Key Identifier: keyid:76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c9:d9:f3:cc:8a:a3:46:92:49:f7:0d:83:b3:5a:b2:9b:f4: ef:82:10:f9:ff:dc:59:05:62:98:9b:3a:16:b3:56:7d:d6:27: 1a:b4:1e:15:3c:2d:dd:6e:b5:6c:7e:61:d9:dd:d9:a9:cc:ec: 41:62:6d:10:4e:03:a7:fe:2f:6f:0d:1f:69:1b:e9:0e:b2:c5: 0c:22:a4:c5:b6:bf:a8:17:44:7f:ee:18:72:24:e0:37:d9:41: 1b:e9:e9:47:33:77:83:ee:71:dd:72:5e:0d:36:23:0d:0a:e5: 97:ca:e4:ad:f5:84:3e:68:ed:b2:b3:61:00:64:28:5c:0b:e9: 55:89:7f:ae:51:53:34:28:50:77:39:31:d5:be:94:58:b8:67: 76:bc:02:98:6a:0a:e6:e7:eb:54:e1:5c:64:7b:e6:43:13:99: ad:af:b5:6b:f5:dc:48:e2:06:44:65:00:63:e0:f0:9d:5f:79: 54:e3:c5:b5:35:06:f1:03:47:6c:c8:6f:c5:3d:6a:bf:20:ae: b7:c6:43:2c:91:05:e8:1f:5f:88:c4:a6:e8:df:fe:a6:47:f5: 76:f0:85:80:34:78:e9:18:1d:11:59:3b:2b:d4:1f:e2:b0:8b: 43:26:d2:af:64:27:25:d1:da:d1:d6:e4:55:3d:9f:f1:65:54: fc:97:c3:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeynphSywP+8Q1Lc/Ng0MBxICV0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1MkQ5RDRGOUE2NDJDN0IwNDc3NEM5MENGNkYzRkIy MUI3RjQyQjAeFw0yNTEyMjExODU5NTVaFw0yNTEyMjIxOTQxNTVaMDMxMTAvBgNV BAMTKDIwQkE1Njg2MUI3OUQ3NEVEM0Q1MDM2NDJBRDZENDBDMjgzRkE4MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDerJWzzeIKtxjalw8NKSCn7p7R 6dVd0i623eqazXw2VddMrG3AmlQcLH6mfBALTqQp9oKkoxMVYYV08wzjCosUXzBk ftZY4bZoJSU8BXIzy2frqTG7qTK2RP+Y21X4Xa+TB8gwoEVdqGW6Fh0yFBqO9a0r Tj1OBoswWc/elvBysgqg2DMy/7doNsz4ljiGTJQOmvOR3HEm3mGrV7kqXX8SvGhY SKV5cSPjWg65Nw+zhn+LNcfVPQj0L7yRmnX7IoI1DYFocP14aEHBI6B0V+5LatrK Jmq2sUzhoJg7yw7Rr0YJNzzdOieWbRh/IvyIAIMfVWS2Q2nwBbi+4dnoLRdHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUILpWhht5107T1QNkKtbUDCg/qBcwHwYDVR0j BBgwFoAUdlLZ1PmmQsewR3TJDPbz+yG39CswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFVWWmk1SFRHZnhUbTdYNFlXN2ZxRlczZFU1b3gzTXpDa0Vjelh4UHB6 WVEvMS83NjUyRDlENEY5QTY0MkM3QjA0Nzc0QzkwQ0Y2RjNGQjIxQjdGNDJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NTJEOUQ0RjlBNjQyQzdC MDQ3NzRDOTBDRjZGM0ZCMjFCN0Y0MkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFVWWmk1SFRHZnhUbTdYNFlXN2ZxRlczZFU1b3gzTXpDa0Vjelh4UHB6WVEvMS83 NjUyRDlENEY5QTY0MkM3QjA0Nzc0QzkwQ0Y2RjNGQjIxQjdGNDJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALMnZ88yKo0aSSfcNg7Naspv074IQ+f/cWQVimJs6FrNWfdYnGrQeFTwt3W61 bH5h2d3ZqczsQWJtEE4Dp/4vbw0faRvpDrLFDCKkxba/qBdEf+4YciTgN9lBG+np RzN3g+5x3XJeDTYjDQrll8rkrfWEPmjtsrNhAGQoXAvpVYl/rlFTNChQdzkx1b6U WLhndrwCmGoK5ufrVOFcZHvmQxOZra+1a/XcSOIGRGUAY+DwnV95VOPFtTUG8QNH bMhvxT1qvyCut8ZDLJEF6B9fiMSm6N/+pkf1dvCFgDR46RgdEVk7K9Qf4rCLQybS r2QnJdHa0dbkVT2f8WVU/JfDgg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:54:30 2025 by rpki-client